Privacy Policy

The Mystical Land
A ‘Royal India UG’ brand
c/o Tuesday Coworking
Bundesallee 187,
10717 Berlin
Last updated: 7 January 2026

1. Introduction

We at The Mystical Land are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and protect your information when you visit our website or contact us. We comply with the General Data Protection Regulation (GDPR) and relevant national laws.

2. Controller Information

Data Controller:
Royal India UG
c/o Tuesday Coworking
Bundesallee 187,
10717 Berlin
Email: hi@themysticalland.de
Phone: +49-15510663301
Website: https://themysticalland.de

3. What Personal Data We Collect

We collect only the data you choose to provide or that is technically necessary:

• • • Contact Data: Name, email address, phone number (if you contact us)

    • Travel Preferences: Duration, budget, destination interests

    • Technical Data: IP address, browser type/version, device info, referrer URL, access time (for security and analytics)

4. Purpose and Legal Basis of Processing

We process your personal data only when there is a legal basis for doing so under the GDPR. These are the specific purposes and legal grounds:

• • • To respond to your contact inquiries and communicate with you:
      Legal basis: Performance of pre-contractual measures (Art. 6(1)(b) GDPR)

    • To collect and use your travel preferences for tailored responses:
      Legal basis: Performance of pre-contractual measures (Art. 6(1)(b) GDPR)

    • To ensure the security, functionality, and technical stability of our website:
      Legal basis: Our legitimate interest in maintaining and securing our online services (Art. 6(1)(f) GDPR)

    • To use cookies or analytics tools (if applicable):
      Legal basis: Your explicit consent, where required (Art. 6(1)(a) GDPR)

5. Recipients of Personal Data

We may share your personal data with the following categories of recipients, only to the extent necessary for business or legal purposes:

• • • IT service providers and hosting companies (for maintaining our website and systems)

    • Communication providers (e.g., for email or contact forms)

    • Travel partners, including tour operators based in non-EU countries such as India, if required to arrange your requested services

    • Legal or tax consultants (where required by law)

Your data will not be sold, and we do not use it for automated profiling.

6. Transfer of Personal Data

As part of our data processing, personal data may be transferred to or accessed by other parties such as:

• • • External service providers (e.g., IT or web hosting companies)

    • Email or communication system providers

    • Integrated content and analytics providers (if applicable)

    • Tour operators or travel partners located outside the EU/EEA (e.g., in India), where necessary for arranging or fulfilling your travel-related requests

These transfers are made strictly for business purposes related to delivering the services you requested. In all such cases, we ensure compliance with GDPR by:

• • • Only sharing the minimum necessary information

    • Using appropriate safeguards, such as contracts or data processing agreements (per Art. 28 GDPR)

    • Ensuring that any data transfer to a third country is based on appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) or equivalent measures where no adequacy decision is in place

6a. Data Processing in Third Countries

If data is processed in a third country (outside the EU/EEA), this is done in compliance with applicable legal requirements. Transfers may occur in the following contexts:

• • • Use of third-party services or tools located abroad

    • Direct communication with or transfer of data to travel service providers in non-EU countries such as India

Where no adequacy decision exists, we rely on mechanisms such as:

• • • Standard Contractual Clauses (SCCs)

    • Your explicit consent (when applicable)

    • Necessity for contract performance (Art. 49(1)(b) GDPR)

7. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy:

• • • Contact and inquiry data: Kept for up to 3 years after your last communication with us, in case of follow-up or future interest.

    • Travel preference data: Stored for up to 12 months, unless it becomes part of a service arrangement.

    • Technical data (e.g., IP logs): Retained for 30 days for security and troubleshooting purposes.

After these periods, your data will be securely deleted or anonymized.

8. Your GDPR Rights

You have the following rights under the GDPR:

• • • Right to access your data (Art. 15 GDPR)

    • Right to rectification (Art. 16)

    • Right to erasure (Art. 17)

    • Right to restrict processing (Art. 18)

• • • Right to data portability (Art. 20)

    • Right to object to processing (Art. 21)

    • Right to withdraw consent (Art. 7(3)) at any time

To exercise your rights, email: collaborate@themysticalland.de

You may also lodge a complaint with the German supervisory authority:
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
https://www.bfdi.bund.de

9. Cookies and Tracking Technologies

We use cookies to improve your website experience:

• • • Necessary cookies: For site functionality (no consent required)

    • Optional cookies: For analytics or embedded media (require consent)

You will be prompted via our cookie banner to accept or reject optional cookies. See our Cookie Policy for more details.

10. Data Security

We implement state-of-the-art security measures, including:

• • • SSL/TLS encryption of all web traffic

    • Access controls and secure hosting infrastructure

    • Regular reviews of technical measures

11. Updates to This Policy

We may update this Privacy Policy as laws change or our services evolve. The current version is always available at:
https://themysticalland.de/en/privacy-policy/